Can we on-board a HA SD-WAN site to Prisma Access as a non ECMP site?
1241
Created On 07/28/23 17:03 PM - Last Modified 06/01/24 02:49 AM
Question
Can we on-board a HA SD-WAN site to Prisma Access as a non ECMP site ?
Environment
- Prisma Access Cloudblades version 3.1.6 and version 4.0.0
- Prisma SD-WAN High Availability site
Answer
- Prisma Access Cloudblades does not support on-boarding a HA site as a non ECMP site.
- One can on-board it only as a ECMP site if prisma_ha_primary is added on the active ION.
- When Onboarding a non ECMP site, do not add the "prisma_ha_primary" tag on the active ION.
- This will be considered as a non ha site and then one can on-board it as a non ECMP site .
Additional Information
- Validation errors are seen on panorama when trying to on-board it as a non ECMP site .
Partial changes to commit: changes to configuration by administrators: __cloud_services
Changes to all template configuration
Proxy id 'AUTO-CGX_siteDSC_01_1490' cannot be set for 'AUTO-CGX_siteDSC_01_1490' Ipsec tunnel which is part of ECMP load balancing configuration.
Proxy id 'AUTO-CGX_siteDSC_02_1490' cannot be set for 'AUTO-CGX_siteDSC_02_1490' Ipsec tunnel which is part of ECMP load balancing configuration.
Failed plugin validation